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Application/Control Number: 10/021,364 

DETAILED ACTION 

1 . This application has been examined. Claims 1-21 are pending. 

Allowable Subject Matter 

2. The following is a statement of reasons for the indication of allowable 
subject matter: 

None of the prior art of record taken singularly or in combination taught or 
suggested a network devices monitoring scheme comprising a distributor 
receiving a message from an entity detecting an anomaly on a network device 
and using a filter device for testing value of an argument contained in the 
message using a filter including filtering expression that is created on run time; 
and transmitting device for transmitting the received message if the run time 
created expression is true. 

Claim Objections 

3. Claim 20 is objected to under 37 CFR 1 .75(c), as being of improper 
dependent form for failing to further limit the subject matter of a previous claim. 
Applicant is required to cancel the claim(s), or amend the claim(s) to place the 
claim(s) in proper dependent form, or rewrite the claim(s) in independent form. 

Claims 12, 16 and 17 are directed to a method for operating a computer, 
which inherently comprise a computer readable media having instructions for 
executing on the computer for the practice of the claimed method. Thus, claim 20 
is redundant, because it does not further limit the claimed invention. 



Claim Rejections - 35 USC §112 
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4. The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

5. Claims 18, 19 is rejected under 35 U.S.C. 1 12, second paragraph, as 
being indefinite for failing to particularly point out and distinctly claim the subject 
matter which applicant regards as the invention. 

• Claim 1 8 recites, "A node for carrying out the method according to claim 
..." (claim 1 8, Claim Line 1 ). It is not clear whether the "node" is software 
or a hardware object that have a processor to carryout the method as 
claimed. 

o The examiner will presume the term "node" to mean a hardware 
device with a processor that can be configured to process the 
claimed method. 

• As per claim 1 9, the inventive entity recites the following: 
A computer network, comprising: 

At least one computer, the computer connected into the network, 
as claimed in claim 1 or claim 8 or claim 11. 

By definition, a network has a group of two or more computer 
systems linked together or in other means, a network is defined as two or 
more computers connected together with the ability to communicate with 
each other. Thus, it is inaccurate claim, because "one computer" does not 
make a network. 

Claim Rejections - 35 USC § 101 
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6. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture or 
composition of matter, or any new and useful improvement thereof, may obtain a patent 
therefor, subject to the conditions and requirements of this title. 

7. Claim 21 is rejected under 35 U.S.C. 1 01 because the claimed invention h 
directed to non-statutory subject matter. 

• As per clai m 2 1 , Electromagnetic signals traveling over a computer 
network, comprising: the electromagnetic signals carrying instructions for 
executing on a computer for the practice of the method of claim 12 or 16 
or claim 17. 

o This claim is directed to a non-statutory subject matter (a signal 
per se), which is not tangibly embodied on a computer readable 
medium so is to be executable. 



Double Patenting 

8. A rejection based on double patenting of the "same invention" type finds 
its support in the language of 35 U.S.C. 101 which states that "whoever invents 
or discovers any new and useful process ... may obtain a patent therefor " 
(Emphasis added). Thus, the term "same invention," in this context, means an 
invention drawn to identical subject matter. See Miller v. Eagle Mfg Co 151 
U.S. 186 (1894); In re Ockert, 245 F.2d 467, 114 USPQ 330 (CCPA 1957)- and 
In re Vogel, 422 F.2d 438, 1 64 USPQ 61 9 (CCPA 1 970). 

A statutory type (35 U.S.C. 101) double patenting rejection can be 
overcome by canceling or amending the conflicting claims so they are no longer 
coextensive in scope. The filing of a terminal disclaimer cannot overcome a 
double patenting rejection based upon 35 U.S.C. 101. 

9. Claims 10 and 18/12 are rejected under 35 U.S.C. 101 as claiming the 
same invention as that of claims 6, 10 and 16 of prior U.S. Patent No. 6,381,630. 



This is a double patenting rejection. 
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Application SN 10/021364 


U.S. Patent Number 6,381,630 


Claim 12, recites: 

A) receiving a message that 
indicates an anomaly on a 
network device; 

B) compiling a filtering program 
that is associated with the 
message; 

C) filtering the message in 
accordance with the filtering 
program by testing an argument 
value in the message in 
accordance with a filtering 
expression of the filtering 
program, and the filtering 
expression is created at run 
true; and, 

D) distributing the filtered 
message if a result of the 
filtering expression is true. 


Patented Claim 6, disclosed: 

A) receiving a message that 
indicates an anomaly on a 
network device; 

B) compiling a filtering program 
that is associated with the 
message; 

C) filtering the message in 
accordance with the filtering 
program by testing an argument 
value in the message in 
accordance with a filtering 
expression of the filtering 
program wherein the filtering 
expression is created at run 
time; and 

D) distributing the filtered 
message if a result of the 
filtering expression is true. 


Claim 18, recites: 

A node for carrying out the method 
according to claim 12 ... 


Patented Claim 10, disclosed: 

A node for carrying out the method 
according to claim 6 ] 


Claim 10 recites: 

• a distributor software 
application on said computer 
for receiving at least one 
message that indicates an 
anomaly on a network 

UcvlUC, 

• means for compiling a 
filtering program that is 
associated with the at least 
one message; 


Patented Claim 16, disclosed: 1 

• a distributor software 
application on said computer 
for receiving at least one 
message that indicates an 
anomaly on a network 
device; 

• a means for compiling a 
filtering program that is 
associated with the at least 
one message; 
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• a filtering device for use by 
the distributor to test a value 
of an argument contained in 
the message, the filtering 



a filtering device for use by 
the distributor to test a value 
of an argument contained in 
the message, wherein the 



program being created at run 
time; and, 



filtering program is created at 
run time; and 



• means for distributing the 
message if a result of the 



a means for distributing the 
message if a result of the 
filtering program is true. 



filtering program is true. 



The above rejected claim 16 of application # 10/021364 and the patented 
claim 6 are identical except for the preamble. However, a preamble is generally 
not accorded any patentable weight when the body of the claim does not include 
limitation or terms that are recited in the preamble. In this case, Non of the body 
of claim 12 of the application and the body of the patented claim 6 incorporate 
terms recited in the preamble of the claims. 

This is double patenting rejection. 



10. The nonstatutory double patenting rejection is based on a judicially 
created doctrine grounded in public policy (a policy reflected in the statute) so as 
to prevent the unjustified or improper timewise extension of the "right to exclude" 
granted by a patent and to prevent possible harassment by multiple assignees 
See In re Goodman, 1 1 F.3d 1046, 29 USPQ2d 2010 (Fed. Cir. 1993)- In re 
Longi, 759 F.2d 887, 225 USPQ 645 (Fed. Cir. 1985); In re Van Ornum 686 
F.2d 937, 214 USPQ 761 (CCPA 1982); In re Vogel, 422 F.2d 438, 164 
USPQ 619 (CCPA 1970);and, In re Thorington, 418 F.2d 528, 163 USPQ 644 
(CCPA 1969). 

A timely filed terminal disclaimer in compliance with 37 CFR 1 .321(c) may 
be used to overcome an actual or provisional rejection based on a nonstatutory 
double patenting ground provided the conflicting application or patent is shown to 
be commonly owned with this application. See 37 CFR 1 .130(b). 

Effective January 1, 1994, a registered attorney or agent of record may 
sign a terminal disclaimer. A terminal disclaimer signed by the assignee must 
fully comply with 37 CFR 3.73(b). 
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11. Claims 1-9, 11, 13-17, 19-21 are rejected under the judicially created 
doctrine of obviousness-type double patenting as being unpatentable over claims 
1-18 of U.S. Patent No. 6,381,630. Although the conflicting claims are not 
identical, they are not patentably distinct from each other because the only 
difference between the patented claims and the pending claims are minor 
wording variations and omission of undesired terms which does not change the 
scope of the invention as claimed. 



Application SN 10/021364 


U.S. Patent Number 6,381,630 


Claim 1 recites: 

• a distributor that receives a 
message from an entity that 
detects an anomaly on a 
network device; 

• a filtering device, for use by the 
distributor, tests a value of an 
araument contained in thp 
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message using a filtering 
expression that is created at nm 
time; and, 

• a transmitting device for 
transmitting the message if a 
result of the filtering expression 
is true. 


Patented Claim 1, disclosed: 

• a distributor that receives a 
generated message from an 
entity that detects an anomaly 
on a network device; 

• a filtering device for use by the 

di^trihntor that rnntainc o 

filtering expression for testing a 
value of an argument contained 
in the generated message, 
wherein the filtering expression 
is created at run time; and 

• a transmitting device for 
transmitting the message if a 
result of the filtering expression 
is true. 


Claim 2, recites: 

• the distributor compiles each 
filtering device, and the filtering 
device is a filtering program, and 
the filtering program is 
programmed in a programming 
language that can be compiled. 


Patented Claim 2, disclosed: 

• the distributor compiles each 
filtering device, wherein the 
filtering device is a filtering 
program, the filtering program is 
programmed in a programming 
language that can be compiled. 



Application/Control Number: 10/021,364 



Claim 3 recites: 

• tne aistriDutor dynamically loads 
the compiled filtering program 
before executing the filtering 
expression in the filtering 
program. 


Patented Claim 3, disclosed: 

• the distributor dynamically loads 
the compiled filtering program 
before executing the filtering 
expression in the filtering 
program. 


Claim 4 recites: 

• the filtering program includes a 
test implemented in a Boolean 
statement. 


Patented Claim 4, disclosed: 

• the filtering program includes a 
test implement in one of a 
Boolean statement and ... 


Vsidiin d recues, 

• the filtering program includes a 
test implemented in a SQL 
statement. 


Patented Claim 4, disclosed: 

• the filtering program includes a 
test implement in ... a SQL 
statement. 


Claim 6, recites: 

• the filtering program includes a 
programming expression that 
performs queries on at least one 
individual message. 


Patented Claim 5, disclosed: 

• the filtering program includes a 
programming expression that 
performs queries on one of an 
individual message and a group 
of messages. 


Claim 7, recites: 

• the filtering program includes a 
programming expression that 
performs queries on a group of 
messages. 


Patented Claim 5, disclosed: 

• the filtering program includes a 
programming expression that 
performs queries on one of an 
individual message and a group 
of messages 


Claim 8, recites: 

• a distributor that receives a 
message from a network device, 
the message containing a value 
of an argument, the distributor 


Patented Claim 18, disclosed: 

• receiving a message into a 
distributor software application, 
said message indicating an 
anomaly on a network device; 
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testing the value of the 
argument in accordance with a 
filtering expression to distribute 
the message if a result of the 
filtering expression is true; and 

• a filtering device that creates the 
filtering expression at run time. 


filtering the message by a 
filtering program that contains a 
filtering expression for testing a 
value of an argument contained 
in the message, wherein the 
filtering expression is created at 
run time; and 

• transmitting the message 
through a transmitting device if a 
result of the filtering expression 
is true. 


Claim 9 recites: 

• a distributor for receiving at least 
one message that indicates an 
anomaly on a network device; 

• means for compiling a filtering 
program that is associated with 
the at least one message; 

• a filtering device for use by the 
distributor tests a value of an 
argument contained in the at 
least one message, using a 
filtering program that is created 
at run time; and, 

• means for distributing the 

filtering program is true. 


Patented Claim 14, disclosed: 

• a distributor for receiving at 
least one message that 
indicates an anomaly on a 
network device; 

• a means for compiling a filtering 
program that is associated with 
the at least one message; 

• a filtering device for use by the 
distributor to test a value of an 
argument contained in the 
message, wherein the filtering 
program is created at run time; 
and 

• a means for distributing the 
message if a result of the 
filtering program is true. 






Claim 11, recites: 

• a distributor software application 
on said computer for receiving at 
least one message that 
indicates an anomaly on a 
network device; 


Patented Claim 16, disclosed: 

• a distributor software 

application on said computer 
for receiving at least one 
message that indicates an 
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• a compiler to compile a filtering 
program that is associated with 
the at least one message; 

• a filtering device for use by the 
distributor to test a value of an 
argument contained in the 
message, wherein the filtering 
program is created at run time; 
and 

• a transmittinn ripvirp tn transmit 
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the message if a result of the 
filtering program is true. 


anomaly on a network 
device; 

• a means for compiling a 
filtering program that is 
associated with the at least 
one message; 

• a filtering device for use by 
the distributor to test a value 
of an argument contained in 
the message, wherein the 
filtering program is created at 
run time; and 

• a means for distributing the 
message if a result of the 
filtering program is true. 






Claim 13 recites: 

• writing and compiling the filtering 
program in a language similar to 
that of the distributor. 


Patented Claim 7, disclosed: 

• ... compiling comprises the ... 
writing and compiling the filtering 
program in a language similar to 
that of the distributor. 


Claim 14 recites: 

• loading the compiled filtering 
program; and, 

• executing the filtering 
expression. 


Patented Claim 8, disclosed: 

• dynamically loading the 
compiled filtering program; and 

• executing the filtering 
expression. 


Claim 15 recites: 

• altering the filtering program 
dynamically during run time in 
response to the anomaly. 


Pafpntpri Plaim Q HicrlncAH- 
raiciucu Id II II 9, UI5CIOS6Q. 

• ... dynamically altering the 
filtering program during run time 
in response to the anomaly. 


Claim 16 recites: 


Patented Claim 15, disclosed: 
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• receiving a message into a 
distributor, the distributor 
receiving state messages from 
producers and transmitting the 
state messages to the 
appropriate network consumer, 
the message indicating an 
anomaly on a network device; 

• filtering the message by a 
filtering program that contains a 
filtering expression for testing a 
value of an argument contained 
in the message, and the filtering 
expression is created at run 
time; and 

• transmitting the message 
through a transmitting device if a 
result of the filtering expression 
is true. 


• receiving a message into the 
distributor that indicates an 
anomaly on a network device; 

• filtering the message through by 
a filtering program that contains 
a filtering expression for testing 
a value of an argument 
contained in the message, 
wherein the filtering expression 
is created at run time; and 

• transmitting the message 
throuah a transmittina devirp if ^ 
result of the filtering expression 
is true. 


Claim 17 recites: 

• receiving a message into a 
distributor software application, 
said message indicating an 
anomaly on a network device; 

• filtering the message by a 
filtering program that contains a 
filtering expression for testing a 
value of an argument contained 
in the message, and the filtering 
expression is created at run 
time; and, 

• transmitting the message 
through a transmitting device if a 
result of the filtering expression 
is true. 


Patented Claim 15, disclosed: 

• receiving a message into the 
distributor that indicates an 
anomaly on a network device; 

• filtering the message through by 
a filtering program that contains 
a filtering expression for testing 
a value of an argument 
contained in the message, 
wherein the filtering expression 
is created at run time; and 

• transmitting the message 
through a transmitting device if a 
result of the filtering expression 
is true. 






Claim 19, recites: 

• A computer network, 
comprising: at least one 
computer, the computer 


Patented Claim 17, disclosed: 

• A packet switching 
communication network 
comprising at least one node 
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! connected into the network, as 
in claim 1 or claim 8 or claim 9 
or claim 10 or claim 11. 


according to claim 16. 


Claim 20 recites: 

• instructions written on the 
computer readable media, the 
instructions for executing on a 
computer for the practice of the 
method of claim 12 or claim 16 
or claim 17. 


Patented Claim 11, disclosed: 

• instructions and data written on \ 
said computer readable 
medium, said instructions and 
data containing information for 
the practice of the method of 
claim 6. 


Claim 21 recites: 

• Electromagnetic signals 
traveling over a computer 
network, comprising: the 
electromagnetic signals carrying 
instructions for executing on a 
computer for the practice of the 
method of claim ... 


Patented Claim 12, disclosed: 

• Electromagnetic signals 
traveling over a computer 
network comprising: said 
electromagnetic signals carrying 
information for the practice of 
the method of claim ... 



This is obviousness-type double patenting. 



Conclusion 

12. The prior art made of record and not relied upon is considered pertinent to 
Applicant's disclosure. 



a. Dong, Jianming et al. (U.S. Patent Number 6571275 B1) Entitled: 
Method and apparatus for filtering messages in a data processing system 

b. Cobb, Christopher Alan (U.S. Patent Number 6199102 B1) 
Entitled: Method and system for filtering electronic messages 

c. Chu, Clare(U.S. Patent Number 61 821 1 9 B1 ) Entitled: 
Dynamically configurable filtered dispatch notification system 
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d. Narasimhan, Anand et al. (U.S. Patent Number 6073165 A) 
Entitled: Filtering computer network messages directed to a user's e-mail 
box based on user defined filters, and forwarding a filtered message to the 
user's receiver 

e. Arrowsmith, Russell et al. (U.S. Patent Number 6057757 A) 
Entitled: Method and apparatus for policy-based alarm notification in a 
distributed network management environment 

f. Cohen, Richard Jay(U.S. Patent Number 5881315 A) Entitled: 
Entitled: Queue management for distributed computing environment to 
deliver events to interested consumers even when events are generated 
faster than consumers can receive 

g. Otteson, Steven D. (U.S. Patent Number 5867659 A) Entitled: 
Method and apparatus for monitoring events in a system 

h. Hussey, Peter (U.S. Patent Number 5826269 A) Entitled: 
Electronic mail interface for a network server 

/'. Bellovin, Steven Michael et al. (U.S. Patent Number 5805820 A) 
Entitled: Method and apparatus for restricting access to private information 
in domain name systems by redirecting query requests 
j. Singh, Surinder et al. (U.S. Patent Number 5758083 A) Entitled: 
Method and system for sharing information between network managers 
k. Bonnell, David N. et al. (U.S. Patent Number 5655081 A) Entitled: 
System for monitoring and managing computer resources and applications 
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across a distributed computing environment using an intelligent 
autonomous agent architecture 

I. Hershey, Paul C. et al. (U.S. Patent Number 5568471 A) Entitled: 

System and method for a workstation monitoring and control of 
multiple networks having different protocols. 

NON-PATENT DOCUMENT 
m. Meyer et al, "Performance analysis of distributed applications with 
ANSAmon", Feb. 1995, International Conference on Open Distributed 
Process- ing (ICODP '95), "Participant's proceedings" edition, pages 
293—304. 

n. Lane et al, "An application of machine learning to anomaly 
detection", (Baltimore, MD. 1997), In National Information Systems 
Security Conference, Volume 1 pp. 366--380. 

13. Any inquiry concerning this communication or earlier communication from 
the examiner should be directed to Yemane Gerezgiher whose telephone 
number is 703-305-4874. The examiner can normally be reached on Monday- 
Friday from 9:00 AM to 5:30 PM. 

If attempts to reach the examiner by telephone are unsuccessful. The 
examiner's supervisor, William Cuchlinski, can be reached at (703) 308-3873. 

Yemane M. Gerezgiher 
AU2144 

MARC D • THOMPSON 
PRIMARY EXAMINER 



